www.di.no

- DISTRIBUTION INNOVATION AS -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 58:af:0f:ed:72:17:09:2c:f7:0f:28:35:46:1f:b5:54 was issued on by Symantec Corporation.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

DISTRIBUTION INNOVATION AS

Organization: DISTRIBUTION INNOVATION AS
Organization unit: SCHIBSTED
State / Province: Oslo
Locality: Oslo
Country: NO

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 58:af:0f:ed:72:17:09:2c:f7:0f:28:35:46:1f:b5:54
Serial Number (int): 117881038627843902050474278477933557076
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): d6:59:f7:52:52:9c:32:49:96:e5:75:a3:91:5b:89:0f:0c:d0:4b:f3
Fingerprint (sha256): 70:fa:87:27:9c:7c:bf:f3:c1:02:fd:03:a3:ea:6b:29:e7:47:fe:21:00:c1:d9:02:73:95:35:2c:ef:47:75:d5

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.di.no

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.di.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.di.no
di.no
www.morgenlevering.no
morgenlevering.no

Other certificates including the domain name di.no

(limited to 100 certificates)
flow-event-volume.aws.di.no
*.aws.di.no
fram-dev.aws.di.no
notification-stg.aws.di.no
fdus-4.freshdesk.com
stg-api-cargostream.aws.di.no
fdus-4.freshdesk.com
fram-dev.aws.di.no
ship2me-dev.aws.di.no
app.di.no
spidertest.aws.di.no
di-jobserver-stg.aws.di.no
fdus-4.freshdesk.com
dev-img-budbuddy.aws.di.no
ship2me-stg.aws.di.no
www.di.no
dev-parcel.aws.di.no
dev-parcel.aws.di.no
di-jobserver.aws.di.no
support.endosys.com
scanner.dev-cargostream.aws.di.no
routeanalyser-dev.aws.di.no
dev-cargostream.aws.di.no
stg-cargostream.aws.di.no
fram-stg.aws.di.no
fdus-13.freshdesk.com
sip.schibsted.no
di.no
dev-spider-planandgo.aws.di.no
www.di.no
dev-frontend-planandgo.aws.di.no
fdus-4.freshdesk.com
publisher.dev.media.aws.di.no
dev-frontend-planandgo.aws.di.no
sch-lyfe-03.schibsted.no
publisher.dev.media.aws.di.no
dev-api-cargostream.aws.di.no
app.di.no
cargostream.commerce-eun1-dev-1.eks.schibsted.io
sch-lyfe-04.schibsted.no
*.di.no
fdus-4.freshdesk.com
dev-cargostream.aws.di.no
staging-planandgo.aws.di.no
www.di.no
api.planandgo.di.no
*.di.no
dev-carrier-spider.aws.di.no
fram.aws.di.no
support.inquest.net
api.planandgo.di.no
planandgo.aws.di.no
di.no
stg-spidermanager.aws.di.no
ebudbok-backup-dev.aws.di.no
support.dbssolutions.com
di.no
dev-frontend-planandgo.aws.di.no
ship2me-dev.aws.di.no
sch-lyfe-03.schibsted.no
ship2me-dev.aws.di.no
dev-api-flow.aws.di.no
ship2me.di.no
di-jobserver-dev.aws.di.no
stg-img-budbuddy.aws.di.no
fdus-4.freshdesk.com
stg-spidermanager.aws.di.no
staging-planandgo.aws.di.no
dev-spidermanager.aws.di.no
access.schibsted.no
butler.di.no
support.inquest.net
fdus-4.freshdesk.com
ship2me-dev.aws.di.no
postaldeviations.stg.media.aws.di.no
dev-cargostream.aws.di.no
api.planandgo.di.no
fram-dev.aws.di.no
api.planandgo.di.no
planandgo.aws.di.no
routeanalyser-prod.aws.di.no
stg-api-budbuddy.aws.di.no
dev-flow-volume-estimator.aws.di.no
backup.di.no
stg-admin-cargostream.aws.di.no
*.di.no
estimator-planandgo.aws.di.no
www.di.no
ship2me-stg.aws.di.no
support.inquest.net
estimator-planandgo.aws.di.no
*.di.no
api.cargostream.di.no
support.inquest.net
stg-api-budbuddy.aws.di.no
www.di.no
notification-dev.aws.di.no
ship2me.di.no
spidermanager.aws.di.no
fdus-4.freshdesk.com

Certificate

The complete raw certificate details for www.di.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKldkLVZ+ffoCSp4MeU3
bibo0hdlLU5nyLKXabTQNKs2AHxzWlrLplM7jILZDi9Nk6mqg4BhLBu3CaWXWzhR
DsQb0E1s/0mECEgvWwMVMLlObWp3k56R3hQhB6BIT1ukIuVinkpUzEsiuWvAOtXW
jONY4mXApbaWeX8caF/aOuZOfdvBKYm4OWKLwPjlIuMuok/vfSXhLpCaFr572ctU
ocVfc1wI0q2fuaVOc1iDHmR8uGhboAeDyBMJCa5MNUHArngBMa0ck1ftfQhCGyv6
V9R58EktOnn/2TnuxSEgbCJPy2P5trHy1zU/9SjLwUknKunmRX0vYkDaQ0h12ZcI
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 117881038627843902050474278477933557076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DISTRIBUTION INNOVATION AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SCHIBSTED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.di.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23816318569135181090726832582675352615286934190683356636834028977022554618000957316166984837052088215872956734548277917724123201489572698326174234858360609548452924266995857381007607851637666187272829231576039285929541008602732711241104717759594271992810136296510573369334873699590638344800656686032538381310097546588241259565032672618081193593267292392838874723015429040794399696346381296695920847596884860862185404330811265860867988156957651533881618037776794587380009230168192215386171165412512680906953417359625123746678014228421309108937753674709464229446944783437137422085919720399644888481142533095325930293403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.di.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'di.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morgenlevering.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morgenlevering.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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